Malicious
PowerShell
MD5: b3a873f0b9fb29fccc23866807f602fa
Size: 1.28 MB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
1.28 MB · 1,275,983 B
First seen
2026-07-24 12:31 · 3 months ago
Last seen
2026-07-24 12:31 · 3 months ago
Last analysis
2026-07-25 07:47 · 3 months ago
Hashes
MD5
b3a873f0b9fb29fccc23866807f602fa
Sha1
7cd98f6500919c6d5cf402b2db2839538d259570
Sha256
a03be075f7e2d5bcb20998b98e59fdab1ce4c959675a9b20076eb959189e2f93
Sha384
b3f798306013aba32ac5395525e357c06bb7c574b7a82b76d865017102f765d15f0f9ef21a1a5d5e2ae1fab5bbb0a3d4
Sha512
9db32624cb4eb0f37b672f2e66016bb6e1fa17d861f26159e152106a1641506bc6b3525ba6ed67dcf339ea3ef7a284c69b82bcdca49e1be1a3baba8b5ececfa5
SSDeep
24576:9haw7jCKANf+gT8dxmdSakkLCsmhaDtE2rW90CVycsa1Al:94wHCiBcScDPWb15il
TLSH
66453340AF198EBD03DCC3C8712B9DAD4F423E41E64994DBB2D3C9E7876A705C9AB494
9 malicious · 10 files
PS1b3a873f0b9fb29fccc23866807f602faT1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
GZ[Base64-Block]T1027 · T1059.001
PS1file_0.binT1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
BIN[Base64-Block]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001>arc:gz>scr:ps1~T1027~T1059.001
Shape
scr:ps1>arc:gz>scr:ps1
malicious
3 nodes